diff options
author | Harald Musum <musum@oath.com> | 2018-11-20 13:07:14 +0100 |
---|---|---|
committer | Harald Musum <musum@oath.com> | 2018-11-20 13:07:14 +0100 |
commit | 282a5bdd0d12484c75751da445dcd3df0e725dae (patch) | |
tree | 0ef8a04a8fcaece6a33cf58a41a0274bb4bffcc8 /node-admin | |
parent | a549b3d81757eb3670982c936c1312a939003816 (diff) |
Set CAP_SYS_NICE for Docker containers
Diffstat (limited to 'node-admin')
-rw-r--r-- | node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java index 26d162fd1a0..48ab63797c7 100644 --- a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java +++ b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java @@ -98,7 +98,8 @@ public class DockerOperationsImpl implements DockerOperations { .withUlimit("nproc", 409_600, 409_600) .withUlimit("core", -1, -1) .withAddCapability("SYS_PTRACE") // Needed for gcore, pstack etc. - .withAddCapability("SYS_ADMIN"); // Needed for perf + .withAddCapability("SYS_ADMIN") // Needed for perf + .withAddCapability("SYS_NICE"); // Needed for set_mempolicy to work DockerNetworking networking = context.dockerNetworking(); |